Nagra Rom 190 and Oscam

pedritto

Inactive User
Joined
Apr 8, 2015
Messages
3
Reaction score
0
Hello,

I have a question about Nagra, we can read a smartcard ROM110a07 with rsa/bk, is not problem with Oscam, but now UPC-Cablecom is changing smartcards to :

Nagra 3 Rom190 DNASP190 MerQ27 !

I't’s a very bad new, we can't read the smardcard with the rsa/bk. I think is not possible, because is Nagra CAK7 ? but I am not sure.

Anyone has an idea for to read a rom190 smartcard?

the caid is 1862 :007301

in the CardsList Oscam, there is not information. Anywhere :-/

Thanks
 
Hello,

I have a question about Nagra, we can read a smartcard ROM110a07 with rsa/bk, is not problem with Oscam, but now UPC-Cablecom is changing smartcards to :

Nagra 3 Rom190 DNASP190 MerQ27 !

I't’s a very bad new, we can't read the smardcard with the rsa/bk. I think is not possible, because is Nagra CAK7 ? but I am not sure.

Anyone has an idea for to read a rom190 smartcard?

the caid is 1862 :007301

in the CardsList Oscam, there is not information. Anywhere :-/

Thanks

Hi

If it using cak7 then it more than likely be using the 00 00 97 block meaning it be using the extra derypt/encrypt round where the cw pairing key is stored in the cpu. you would need to dump the bga chips on box to see whether it using cack6 or cak7 and see if the 00 01 6C block is there or the 00 00 97 block.

i wonder if soon upc-irl willl move from rom142 to this new card be fun and games down there.
 
Nagra Rom190 Rev:Q2B

I have the same problem here in South America, and I can read my BGA Chip and I can remove my RSA and BK, but do not work for HD channels, such as knowing the difference if Nagra cak6.3 or Cak7, depending on the block extraction.
I extract 00 00 01 6C Block
and I have 2 software for extracting

Otherwise, when the card is read by oscam or any other emulator is read as Rom190 Rev:Q2B, and when it is read by the legal receiver is Rom410 rev: Q2B

73710478559_1424094807902.jpg
FTA receiver

77410748743_1015259320109.jpg
Legal Receiver

Researching system is Merlin Cards with two faces Session Start

Rom190 Rev:Q2B
Rom410 Rev:Q2B
CAID:1861


 
Re: Nagra Rom190 Rev:Q2B

Ola Colombano,
me too when I put the new smartcard in the original STB, the info is DNASP410 RevQ27 and with Oscam DNASP190 RevQ27
It's CAK7
I have the old firmware, before to receive the new card.
I have to extract again the dump or it's not worth the effort?
 
Re: Nagra Rom190 Rev:Q2B

I have the same problem here in South America, and I can read my BGA Chip and I can remove my RSA and BK, but do not work for HD channels, such as knowing the difference if Nagra cak6.3 or Cak7, depending on the block extraction.
I extract 00 00 01 6C Block
and I have 2 software for extracting

Otherwise, when the card is read by oscam or any other emulator is read as Rom190 Rev:Q2B, and when it is read by the legal receiver is Rom410 rev: Q2B

View attachment 88036
FTA receiver

View attachment 88037
Legal Receiver

Researching system is Merlin Cards with two faces Session Start

Rom190 Rev:Q2B
Rom410 Rev:Q2B
CAID:1861



Hi

that's the problem nobody is saying much about it.There has been that much rubbish said knows one knows what is true and what is false. Seems there are a few dealers out there that are keeping it to them selves.

as far as aware there different version of cak7 are new encrypten some boxes will have the 0097 block some won't
some of the newer south america boxes have the whole flash encrypted so can't find any block.
Have you made any logs of your card booting up in the stb ie is it sending the NUID
 
Re: Nagra Rom190 Rev:Q2B

[Quote = Tr0jan; 2508972] Hola ese es el problema que nadie está diciendo mucho sobre it.There ha sido que mucha basura, dijo sabe que uno sabe lo que es verdad y lo que es falso. Parece que hay un par de distribuidores por ahí que están manteniendo a ellos mismos. la medida de lo consciente versión no diferente de cak7 son nuevos encrypten algunas cajas tendrán la cuadra 0097 algunos no algunos de los nuevos cuadros sur américa tener todo el flash cifrada por lo que no se puede encontrar ningún bloque. Ha hecho ningún registro de su tarjeta de arrancar en el ejemplo, STB es que el envío de la nuid Identificador de Usuario [/ quote]


I think that says NUID is the Chipset ID in blue photo
 
Re: Nagra Rom190 Rev:Q2B

Ain't possible for both of your cards.

1) card is using entire new protocol + encryption
2) card is using CK
 
Re: Nagra Rom190 Rev:Q2B

Ain't possible for both of your cards.

1) card is using entire new protocol + encryption
2) card is using CK

That you mean when you say that you are using CK ??
Thanks
 
Re: Nagra Rom190 Rev:Q2B

My point is that its out of reach for any hobby amateur (budget) in this world.
You can forget everything you know about nagra so far considering the new system!
 
Re: Nagra Rom190 Rev:Q2B

I have Block 097
Posted here is the modified, @Tr0jan I will send real info by PM


NUID: B4XXXXX
Max Number of Provider IDs: 0001
Provider ID: XXXX
Security Architecture: 0XXX
CW Key descriptor: 01XX
Storage table length: XX
CK1: AAA481B96EEEEEEEEEEEDCFF7A4FDF
CK2: 29D7E5C9KXKXKXKXKX6707F73343437
CK3: 9C53F6DEXXXEEEEEEEEEEEEFEEEEEE
CK4: 0DD8XXXXXXXXXX21F4D9D63XXXXX

CK5: DDDDDDDDDDDDD73CB01B53FFFFFFF
CK6: AAAAAAAAA5EA74F2BBBBBBBBBBBBBBB
CK7: FFFFFFFFFFFFFFF97B7FDB956D3E3C41E
CK8: AAAAAAAAAAAF51F76D9CCCCCCCCC
 
Last edited by a moderator:
Re: Nagra Rom190 Rev:Q2B

Hello,
I extracted all the information to read the map, but I miss him more than the emulator ( oscam , doscam or others) can someone help me to have it?
 
Re: Nagra Rom190 Rev:Q2B

hi
my card also narga3,rom410,caid;1861
You have now found the method work card on oscam?
 
Re: Nagra Rom190 Rev:Q2B

Need some help, I have a dump and I want to extract the boxkey and rsakey, can anyone help me?
 
Re: Nagra Rom190 Rev:Q2B

I have Block 097
Posted here is the modified, @Tr0jan I will send real info by PM


NUID: B4XXXXX
Max Number of Provider IDs: 0001
Provider ID: XXXX
Security Architecture: 0XXX
CW Key descriptor: 01XX
Storage table length: XX
CK1: AAA481B96EEEEEEEEEEEDCFF7A4FDF
CK2: 29D7E5C9KXKXKXKXKX6707F73343437
CK3: 9C53F6DEXXXEEEEEEEEEEEEFEEEEEE
CK4: 0DD8XXXXXXXXXX21F4D9D63XXXXX

CK5: DDDDDDDDDDDDD73CB01B53FFFFFFF
CK6: AAAAAAAAA5EA74F2BBBBBBBBBBBBBBB
CK7: FFFFFFFFFFFFFFF97B7FDB956D3E3C41E
CK8: AAAAAAAAAAAF51F76D9CCCCCCCCC

help me Colombano
 
Re: Nagra Rom190 Rev:Q2B

hello, I'm looking to oscam N3 via Embratel HD channels, if someone has and can post thank you, thank you !!
 
Re: Nagra Rom190 Rev:Q2B

hello, you have the modified 3DES oscam rom 190? t need

the oscam for this setting

NUID: B4XXXXX
Max Number of Provider IDs: 0001
Provider ID: XXXX
Security Architecture: 0XXX
CW Key descriptor: 01XX
Storage table length: XX
CK1: AAA481B96EEEEEEEEEEEDCFF7A4FDF
CK2: 29D7E5C9KXKXKXKXKX6707F73343437
CK3: 9C53F6DEXXXEEEEEEEEEEEEFEEEEEE
CK4: 0DD8XXXXXXXXXX21F4D9D63XXXXX

CK5: DDDDDDDDDDDDD73CB01B53FFFFFFF
CK6: AAAAAAAAA5EA74F2BBBBBBBBBBBBBBB
CK7: FFFFFFFFFFFFFFF97B7FDB956D3E3C41E
CK8: AAAAAAAAAAAF51F76D9CCCCCCCCC

if you can send me thank
 
Re: Nagra Rom190 Rev:Q2B

Hello friends i need help with my card
Sky Germany
Provider: 098c
ROM: P1TV-20AA
ATR: 3F FD 15 25 02 50 80 0F 41 B0 0A 69 FF 4A 50 F0 00 00 50 31 03
Region code: 00BO0102
Cardsystem : videoguard2

my provider start with pair there cards i would ask if is it possible to read the RSA and BK from my card to make work on oscam after the pairing ?
i think SKY UK have the same pairing system because on my card is written SKY UK but my card is from SKY Germany .
thanks i hope any body can me help
 
Back
Top